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Terrorist Capabilities for Cyberattack: 
Overview and Policy Issues 



Summary 

Terrorist’s use of the internet and other telecommunications devices is growing 
both in terms of reliance for supporting organizational activities and for gaining 
expertise to achieve operational goals. Tighter physical and border security may also 
encourage terrorists and extremists to try to use other types of weapons to attack the 
United States. Persistent Internet and computer security vulnerabilities, which have 
been widely publicized, may gradually encourage terrorists to continue to enhance 
their computer skills, or develop alliances with criminal organizations and consider 
attempting a cyberattack against the U.S. critical infrastructure. 

Cybercrime has increased dramatically in past years, and several recent terrorist 
events appear to have been funded partially through online credit card fraud. Reports 
indicate that terrorists and extremists in the Middle East and South Asia may be 
increasingly collaborating with cybercriminals for the international movement of 
money, and for the smuggling of arms and illegal drugs. These links with hackers 
and cybercriminals may be examples of the terrorists’ desire to continue to refine 
their computer skills, and the relationships forged through collaborative drug 
trafficking efforts may also provide terrorists with access to highly skilled computer 
programmers. The July 2005 subway and bus bombings in England also indicate that 
extremists and their sympathizers may already be embedded in societies with a large 
information technology workforce. 

The United States and international community have taken steps to coordinate 
laws to prevent cybercrime, but if trends continue computer attacks will become 
more numerous, faster, and more sophisticated. In addition, a recent report by the 
Government Accountability Office states that, in the future, U.S. government 
agencies may not be able to respond effectively to such attacks. 

This report examines possible terrorists’ objectives and computer vulnerabilities 
that might lead to an attempted cyberattack against the critical infrastructure of the 
U.S. homeland, and also discusses the emerging computer and other technical skills 
of terrorists and extremists. Policy issues include exploring ways to improve 
technology for cybersecurity, or whether U.S. counterterrorism efforts should be 
linked more closely to international efforts to prevent cybercrime. 

This report will be updated as events warrant. 
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Introduction 



Often it is very difficult to determine if a cyber attack or intrusion is the work 
of a terrorist organization with the objective of doing harm, or a cyber criminal who 
wishes to steal information for purposes of monetary gain. Just as terrorists and 
violent extremists often rely on exploiting vulnerabilities of targets seen as soft and 
easy to access to support possible future cyber attacks, cyber criminals exploit these 
same vulnerabilities to gain access to information that may lead to monetary gain. 
Implementation of a stronger policy for domestic physical security has reduced the 
risk to some targets that may have previously been vulnerable to physical attacks. 
Also, it is suggested by numerous experts that terrorists may be enhancing their 
computer skills or forming alliances with cybercriminals that possess a high-level of 
telecommunications expertise. In addition, continuing publicity about Internet 
computer security vulnerabilities may encourage terrorists’ interest in attempting a 
possible computer network attack, or cyberattack, against U.S. critical infrastructure. 

To date, the Federal Bureau of Investigation (FBI) reports that cyberattacks 
attributed to terrorists have largely been limited to unsophisticated efforts such as 
email bombing of ideological foes, or defacing of websites. However, it says their 
increasing technical competency is resulting in an emerging capability for network- 
based attacks. The FBI has predicted that terrorists will either develop or hire 
hackers for the purpose of complimenting large conventional attacks with 
cyberattacks. 1 Recently, during the Annual Threat Assessment, FBI Director Mueller 
observed that “terrorists increasingly use the internet to communicate, conduct 
operational planning, proselytize, recruit, train and to obtain logistical and financial 
support. That is a growing and increasing concern for us.” 2 

IBM has reported that, during the first half of 2005, criminal-driven computer 
security attacks increased by 50 percent, with government agencies and industries in 
the United States targeted most frequently. 3 Cybercrime is now a major criminal 



1 Keith Lourdeau, FBI Deputy Assistant Director, testimony before the U.S. Senate Judiciary 
Subcommittee on Terrorism, Technology, and Homeland Security, February 24, 2004. 

2 Robert Mueller, FBI Director, testimony before the Senate Select Committee on 
Intelligence, January 11, 2007. 

3 IBM Press Release, Government, financial services and manufacturing sectors top targets 

of security attacks in first half of 2005, August 2, 2005, 




